JR46344: RESTRICTING INSTALLATION ACCESS TO PROCESS SERVERS FAILS WHEN THE MAIN ADMIN USER IS NOT A MEMBER OF THE RESTRICTED GROUP

Download Version 8.0.1 Fix Pack 2 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• Restricting snapshot installation access to a process server by
  following these instructions can cause deployment to fail:
  http://pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/index.jsp?topi
  c=%2Fcom.ibm.wbpm.admin.doc%2Ftopics%2Fmanaging_users_g.html
  
  Below error is shown in the logs:
  [4/30/13 17:15:57:554 CDT] 000002c9 GovernanceSer E
  com.lombardisoftware.server.ejb.
  governance.GovernanceEventServiceCore
  deploySnapshotFromGovernance CWLLG3512E: Governance service
  'Install Snapshot' failed due the following error:
  'You are not authorized to deploy this snapshot'
  
  This issue can be seen when moving to BPM 8.0.1 from previous
  versions.
  

Local fix

• Add the system admin user to the authorized users group.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM Business Process Manager user v8.0.1    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Restricting snapshot installation       *
  *                      fails to deploy on process server when  *
  *                      system admin user is not part of        *
  *                      restricted group.                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Failure to deploy snaphot happens because the default
  governance process calls the install snapshot service under
  the system admin user instead of the user that initiated the
  installation request from the ProcessCenter UI.
  

Problem conclusion

• Since the user that triggers the snapshot installation is
  already being checked for authorization before reaching the
  governance code, the governace code needs to skip checking the
  authorization of the user assigned from the sytem lane in
  the default governance process.
  
  Install/Dependency information is available in the readme.txt
  on FixCentral. When the user goes to the download files page
  in FixCentral, the readme will be available with the fix
  package as a separate download.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R800 PSY

     UP